Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
File:                     X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft (raw, json)
Hash identifier:          Tg8/q0Ld58NoxKSEolr+3M+3p56CKGgI0VEzQ6a+N1U=
Subject key identifier:   76:36:92:36:86:18:56:A1:E9:8E:BA:48:30:BC:9C:37:A4:61:2E:12
Authority key identifier: 5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6
Certificate issuer:       /CN=F362A252AF/serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
Certificate serial:       042F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
Manifest number:          042E
Signing time:             Mon 12 May 2025 03:04:05 +0000
Manifest this update:     Mon 12 May 2025 03:04:04 +0000
Manifest next update:     Wed 14 May 2025 03:04:04 +0000
Files and hashes:         1: X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl (hash: fIF2xFfSKSi/yTRvAccEWdGgJKvqvdc3AyZXvqiCJjM=)
                          2: 07EE873A020211EDAC199783F1222468.roa (hash: YfCMAg3Y9dxZRfFftpeSFNVqy74lmtcSUOaH6LHRzXE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071 (0x42f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A252AF, serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
        Validity
            Not Before: May 12 03:04:04 2025 GMT
            Not After : May 14 03:04:04 2025 GMT
        Subject: CN=68216525-f671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:ba:d3:a2:73:11:ad:3c:5e:30:c9:d3:00:
                    cb:6b:3b:5e:87:16:ef:db:8f:e9:81:66:e9:11:1d:
                    0d:35:51:16:0d:85:32:a6:99:69:5f:e5:66:2c:bc:
                    f4:00:ea:41:17:bb:eb:f2:ca:fb:2e:66:99:05:ea:
                    e2:f7:7f:9f:74:a4:10:b2:76:ad:42:d5:a2:6a:a2:
                    62:48:04:13:f9:fb:1f:2d:87:53:c7:3f:3e:b6:d1:
                    7a:1e:a2:23:a6:93:f0:89:f3:db:b6:a3:f5:97:cf:
                    a5:b6:fb:2e:6f:a6:25:0a:1c:4b:b6:1d:d0:6b:d4:
                    01:ec:29:20:e0:1c:73:a6:57:ea:2b:5b:fa:43:a2:
                    d8:38:97:19:5c:7f:53:90:f6:c3:0f:1b:07:5f:3b:
                    ec:cc:d2:cc:37:8e:1d:fa:d5:53:a8:ab:37:88:97:
                    91:0f:dc:8b:ba:c3:e0:4a:d0:33:bd:78:7b:11:91:
                    3c:6f:63:e2:9b:04:6d:2a:d0:ed:95:7e:84:81:7e:
                    19:80:05:ab:fe:cb:82:dc:e3:cf:a8:0c:64:d0:10:
                    92:94:56:a1:f9:95:e6:b3:3d:46:f6:9c:c0:e5:4b:
                    b3:bb:8d:72:0b:9a:5c:60:9c:25:72:60:b3:43:6e:
                    52:f2:47:93:ea:d2:3f:5a:db:06:9a:40:54:4d:d0:
                    11:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:36:92:36:86:18:56:A1:E9:8E:BA:48:30:BC:9C:37:A4:61:2E:12
            X509v3 Authority Key Identifier:
                keyid:5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:24:86:ca:6c:b9:97:04:e9:c4:8c:b6:a4:68:f5:bd:57:ea:
         1b:15:47:70:8f:63:f7:e1:2a:74:9c:14:3c:91:0e:90:eb:02:
         25:79:49:95:60:83:16:2f:5e:e4:ed:fc:1a:1e:57:0d:77:35:
         46:6a:fa:58:0b:d7:b9:75:77:bc:b2:6e:a1:71:3e:f0:1f:c1:
         b8:02:0e:ed:2f:72:f2:cd:e6:bf:57:f3:44:d1:52:a7:95:a2:
         03:c7:79:b3:6a:87:83:5f:8c:f6:66:f5:6b:0a:56:e8:3f:22:
         1b:e8:52:10:a6:bb:c7:0f:54:26:a6:72:71:23:36:5f:ce:59:
         7e:c1:5c:5e:78:d7:ec:4e:1a:a2:42:a6:f9:ce:71:2b:14:c4:
         b4:60:52:ec:9a:3c:00:9c:19:e7:62:20:39:ea:6e:ca:64:fa:
         e0:1f:a6:bb:a9:ba:90:bc:5c:73:12:ab:c8:e9:07:f2:41:e2:
         7c:fd:43:b4:a9:14:e5:51:6e:b9:3d:c0:0f:5b:9f:64:36:b5:
         b7:c5:7f:97:83:7e:c7:56:40:64:3b:c3:21:a3:54:c0:ab:ee:
         94:3a:6c:57:c5:80:ed:25:36:61:1f:36:50:6f:db:6d:52:31:
         aa:ad:6c:30:14:83:5e:8a:ee:07:ef:57:29:ac:a2:b5:8f:e7:
         22:a5:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:04:56 2025 by rpki-client